1. 23 Jul, 2013 10 commits
  2. 22 Jul, 2013 18 commits
  3. 19 Jul, 2013 3 commits
  4. 17 Jul, 2013 1 commit
  5. 15 Jul, 2013 2 commits
  6. 11 Jul, 2013 6 commits
    • Leigh Stoller's avatar
      Implement speaksfor (non-abac) support. · 8d53b3fd
      Leigh Stoller authored
      CM V2 (and thus the AM) now accept a type=speaksfor credential along
      with regular credentials. When supplied, the speaksfor caller must be
      equal to the owner of the speaksfor credential and the target must be
      equal to the owner of the regular credential(s). All operations take
      place in the context of the spokenfor user.
      
      Added speaksfor slots to geni_slices,geni_aggregates and geni_tickets.
      Also to the history table. But these are just the most recent data.
      Each transaction is logged as normal, and the metadata now includes
      the speaksfor data and the log always includes all of the credentials.
      
      For testing, there is a new script in the scripts directory to
      generate a speaksfor credential. Not installed since it is really
      a hack. But to create one:
      
        perl genspeaksfor urn:publicid:IDN+emulab.net+user+leebee \
      	urn:publicid:IDN+emulab.net+user+stoller
      
      which generates a speaksfor credential that says stoller is speaking
      for leebee.
      
      Given a slice credential issued to leebee, the test scripts can be
      invoked as follows (by stoller):
      
        createsliver.py -S speaksfor.cred -s slice.cred -c leebee.cred
      
      A copy of leebee's self credential is needed simply cause of the test
      script's desire to talk to the SA (which does not support speaksfor).
      Not otherwise needed.
      
      Oh, not tested on the AM interface yet.
      8d53b3fd
    • Leigh Stoller's avatar
      Speaksfor changes; full logging of all destructive operations. · 748f2f66
      Leigh Stoller authored
      Also an upcall to add speaksfor metadata to logfile.
      748f2f66
    • Leigh Stoller's avatar
    • Leigh Stoller's avatar
      Finish out ifb based linkdelay support (ingress shaping for lans). · 3a5a1ba9
      Leigh Stoller authored
      This completes linkdelay support for linux, dropping IMQ in favor
      of IFB and netem (so that we do not need to build a special kernel).
      3a5a1ba9
    • Leigh Stoller's avatar
      8e5da11f
    • Leigh Stoller's avatar
      Utility script to generate a speaksfor (non-abac) credential. · a625848e
      Leigh Stoller authored
      In this prototype, a speaksfor credential has type=speaksfor,
      owner=speaker/tool, target=user, and is signed by the user.
      a625848e